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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered Umety. 

- If NO period for repfy is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the ma. ng < date ofth.s commumcabon. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 US.C § 1 33). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 704(b). 

Status 

1 )0 Responsive to communication(s) filed on . 



2a)D This action is FINAL. 2b)E3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
Disposition of Claims 

4) [3 Claim(s) 1^29 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) E3 Claim(s) 1^29 is/are rejected. 

7) Q Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

1 1) D The proposed drawing correction filed on is: a)D approved b)D disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) D The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 120 

13) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a)D All b)Q Some*c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 1 19(e) (to a provisional application). 

a) □ The translation of the foreign language provisional application has been received. 

15) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121. 
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1 ) S Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-41 3) Paper No(s). . 

2) 0 Notice of Draftsperson's Patent Drawing Review (PTO-948) 5) □ Notice of Informal Patent Application (PTO-1 52) 

3) □ Information Disclosure Statement(s) (PTO-1449) Paper No(s) . 6) □ Other: 
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DETAILED ACTION 
Claim Rejections ■ 35 USC §112 

1 . The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

2. Claim 22 is rejected under 35 U.S.C. 1 12, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371(c) of this 
title before the invention thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AIPA) do not apply to the examination of this application as the application 
being examined was not (1) filed on or after November 29, 2000, or (2) voluntarily 
published under 35 U.S.C. 122(b). Therefore, this application is examined under 35 
U.S.C. 102(e) prior to the amendment by the AIPA (pre-AlPA 35 U.S.C. 102(e)). 

4. Claims 1-28 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Williams U.S. Patent No. 6,304,973. Referring to claims 1 and 1 1 , Williams discloses a 
method and system comprising: 
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a. Receiving a packet from one device to a second device (See Column 21 , lines 22-24, 
and Column 23, lines 1-2) 

b. Authenticating an identifier for the packet (See Column 23, lines 2-7) 

c. Determining if packet should be sent to the second device (See Column 23, lines 10- 
15) 

d. Sending packet to second device (See Column 23, lines 17-20) 

Referring to claims 2 and 12, Williams discloses the claimed limitation of comparing 
identifier to a list of identifiers, retrieving at least one policy, and determining if packet 
should be sent to the second device in Column 21, lines 59-67, and Column 22, lines 1- 
3. 

Referring to claims 3 and 13, Williams discloses the claimed limitation of identifier being 
a host identifier in Column 23, lines 28-33. 

Referring to claims 4 and 14, Williams discloses the claimed limitation of authenticating 
in accordance with IPSEC standards in Column 11, lines 60-67. 
Referring Jo' claims 5 and 15, Williams discloses the claimed limitation of retrieving 
security from authentication header, retrieving a key with security, and determining if 
packet is authentic using a key in Column 11, lines 5-36 and Column 12, lines 1-3. 
Referring to claims 6 and 16, Williams disclose the claimed limitation of sending a 
message to a device indicating that identifier is not authentic in Column 16, lines 15-36. 
Referring to claims 7 and 17, Williams disclose the claimed limitation of having an 
IPSEC authentication header in Column 9, lines 36-41. 
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Referring to claims 8 and 18, Williams discloses the claimed limitation of having an 
packet encrypted before receiving it and further decrypting packet before authentication 
in Column 22, lines 33-44, 48-51. 

Referring to claims 9 and 19, Williams discloses the claimed limitation of encrypting and 
decrypting a packet by using DES and triple DES in Column 9, lines 21-28. 
Referring to claims 10 and 20, Williams discloses the claimed limitation of having a 
policy stored in a file in a second device in Column 15, lines 41-57. 
Referring to claim 21, Williams discloses the claimed limitation of having input coupled 
to a network for receiving a packet in Column 19, lines 66-67 and Column 20, lines 1-4, 
a first buffer coupled to input for storing packet in Column 24, lines 57-67, memory 
containing a list of identifiers (profiles) in Column 25, lines 37-46, another memory for 
storing decryption of packets in Column 24, lines 48-54, a processor coupled to first 
buffer in Column 17, lines 41-46, and a output for forwarding packet to second device in 
Column 21, Iines16-21. 

Referring to claim 22, Williams discloses the claimed limitation of having a second 
buffer for storing packets in Column 24, lines 34-38. 

Referring to claim 23, Williams discloses the claimed limitation of having random access 
memory in Column 19, lines 66-67, Column 20, lines 1-4. 

Referring to claim 24, Williams discloses the claimed limitation of having a non-volatile 
random access memory in Column 19, lines 59-61. 

Referring to claim 25, Williams discloses the claimed limitation of receiving a list of 
addresses in Column 21 , lines 59-64. 
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Referring to claim 26, Williams discloses the claimed limitation of receiving a terminal 
and a serial port in Column 15, lines 66-67 and Column 16, lines 1-8. 
Referring to claim 27, Williams discloses the claimed limitation of receiving a network 
interface card in Column 6, lines 53-57. 

Referring to claim 28, Williams discloses the claimed limitation of having a wireless 
network for receiving packets in Column 12, lines 56-67. 



5. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

6. Claim 29 is rejected under 35 U.S.C. 103(a) as being unpatentable over Williams 
in view of Shwed U.S. Patent No. 5,606,668. Referring to claim 29, Williams teaches the 
means of providing cryptographic techniques as a method of authenticating the identity 
of each sender, before encrypting and decrypting each packet. However, Williams does 
not teach the means for a distributed firewall system comprising a system management 
module and a packet filter processor. Shwed teaches the claimed limitation of having a 
first network device in Column 3, lines 27-31, a second network device in Column 3, 
lines 31-35, a packet filter for each network device in Column 3, lines 59-65, and a 
system administrator control module to manage packet filters in Column 3, lines 44-48 
and Column 4, lines 30-37. Accordingly, it would have been obvious to a person of 
ordinary skill in the art, at the time the invention was made to incorporate packet filtering 
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in a distributed firewall, which allows network security to be more controllable when 
communicating through a data packet. Furthermore, one of ordinary skill in the art would 
have been motivated to do this since, a need exists for a secure method and system 
that supports data packets in a public network which prevents unauthorized usage. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. Caronni U.S. Patent No. 6,507,908 teaches a method for 
securing data communication with mobile hosts. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Courtney D. Fields whose telephone number is 703- 
305-8293. The examiner can normally be reached on Mon - Thu 7:00 - 5:00 pm; off 
every Fri. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 703-305-1830. The fax phone numbers 
for the organization where this application or proceeding is assigned are 703-746-7239 
for regular communications and 703-746-7238 for After Final communications. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. 
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